December 2018

openSUSE-RU-2018:4246-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4246-1 Rating: moderate References: #1117355 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes … [View More]

1 0

openSUSE-RU-2018:4245-1: moderate: Recommended update for openCryptoki
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for openCryptoki ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4245-1 Rating: moderate References: #1096378 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openCryptoki … [View More]

1 0

openSUSE-RU-2018:4244-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4244-1 Rating: moderate References: #1083066 #1088648 #1118117 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: … [View More]

1 0

openSUSE-RU-2018:4243-1: important: Recommended update for suse-module-tools
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for suse-module-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4243-1 Rating: important References: #1116665 #1119371 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2018:4242-1: moderate: Security update for tryton
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for tryton ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4242-1 Rating: moderate References: #1117105 Cross-References: CVE-2018-19443 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is … [View More]

1 0

openSUSE-RU-2018:4241-1: moderate: Recommended update for psmisc
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for psmisc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4241-1 Rating: moderate References: #1098697 #1112780 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for psmisc … [View More]

1 0

openSUSE-SU-2018:4240-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4240-1 Rating: moderate References: #1115916 #1115917 #1117998 Cross-References: CVE-2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2018-3613 Affected Products: openSUSE Leap 15.0 … [View More]______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPEND_WRITE (bsc#1115916). - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c (bsc#1115917). - CVE-2017-5732: Fixed privilege escalation via processing of malformed files in BaseUefiDecompressLib.c (bsc#1115917). - CVE-2017-5733: Fixed privilege escalation via heap-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5734: Fixed privilege escalation via stack-based buffer overflow in MakeTable() function (bsc#1115917). - CVE-2017-5735: Fixed privilege escalation via heap-based buffer overflow in Decode() function (bsc#1115917). Non security issues fixed: - Fixed an issue with the default owner of PK/KEK/db/dbx and make the auto-enrollment only happen at the very first time. (bsc#1117998) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1590=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ovmf-2017+git1510945757.b2662641d5-lp150.4.9.1 ovmf-tools-2017+git1510945757.b2662641d5-lp150.4.9.1 - openSUSE Leap 15.0 (x86_64): qemu-ovmf-x86_64-debug-2017+git1510945757.b2662641d5-lp150.4.9.1 - openSUSE Leap 15.0 (noarch): qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp150.4.9.1 qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp150.4.9.1 References: https://www.suse.com/security/cve/CVE-2017-5731.html https://www.suse.com/security/cve/CVE-2017-5732.html https://www.suse.com/security/cve/CVE-2017-5733.html https://www.suse.com/security/cve/CVE-2017-5734.html https://www.suse.com/security/cve/CVE-2017-5735.html https://www.suse.com/security/cve/CVE-2018-3613.html https://bugzilla.suse.com/1115916 https://bugzilla.suse.com/1115917 https://bugzilla.suse.com/1117998 [View Less]

1 0

openSUSE-RU-2018:4239-1: Recommended update for perl-Bootloader
by maintenance＠opensuse.org 22 Dec '18

22 Dec '18

openSUSE Recommended Update: Recommended update for perl-Bootloader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4239-1 Rating: low References: #1079321 #1108777 #994322 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2018:4213-1: moderate: Security update for keepalived
by opensuse-security＠opensuse.org 21 Dec '18

21 Dec '18

openSUSE Security Update: Security update for keepalived ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4213-1 Rating: moderate References: #1015141 #1069468 #949238 Cross-References: CVE-2018-19044 CVE-2018-19045 CVE-2018-19046 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 … [View More]

1 0

openSUSE-SU-2018:4212-1: moderate: Security update for keepalived
by opensuse-security＠opensuse.org 21 Dec '18

21 Dec '18

openSUSE Security Update: Security update for keepalived ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4212-1 Rating: moderate References: #1015141 #1069468 #949238 Cross-References: CVE-2018-19044 CVE-2018-19045 CVE-2018-19046 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 … [View More]______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for keepalived to version 2.0.10 fixes the following issues: Security issues fixed (bsc#1015141): - CVE-2018-19044: Fixed a check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats - CVE-2018-19045: Fixed mode when creating new temporary files upon a call to PrintData or PrintStats - CVE-2018-19046: Fixed a check for existing plain files when writing data to a temporary file upon a call to PrintData or PrintStats Non-security issues fixed: - Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) - Use getaddrinfo instead of gethostbyname to workaround glibc gethostbyname function buffer overflow (bsc#949238) For the full list of changes refer to: http://www.keepalived.org/changelog.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1575=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1575=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1575=1 Package List: - openSUSE Leap 42.3 (x86_64): keepalived-2.0.10-7.3.1 keepalived-debuginfo-2.0.10-7.3.1 keepalived-debugsource-2.0.10-7.3.1 - openSUSE Leap 15.0 (x86_64): keepalived-2.0.10-lp150.3.4.1 keepalived-debuginfo-2.0.10-lp150.3.4.1 keepalived-debugsource-2.0.10-lp150.3.4.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): keepalived-2.0.10-bp150.3.4.1 References: https://www.suse.com/security/cve/CVE-2018-19044.html https://www.suse.com/security/cve/CVE-2018-19045.html https://www.suse.com/security/cve/CVE-2018-19046.html https://bugzilla.suse.com/1015141 https://bugzilla.suse.com/1069468 https://bugzilla.suse.com/949238 [View Less]

1 0

openSUSE-SU-2018:4197-1: moderate: Security update for salt
by opensuse-security＠opensuse.org 19 Dec '18

19 Dec '18

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4197-1 Rating: moderate References: #1104491 #1107333 #1108557 #1108834 #1108995 #1109893 #1110938 #1112874 #1113698 #1113699 #1113784 #1114197 #1114824 Cross-References: CVE-2018-15750 CVE-2018-15751 Affected Products: openSUSE Leap 42.3 … [View More]______________________________________________________________________________ An update that solves two vulnerabilities and has 11 fixes is now available. Description: This update for salt fixes the following issues: - Crontab module fix: file attributes option missing (boo#1114824) - Fix git_pillar merging across multiple __env__ repositories (boo#1112874) - Bugfix: unable to detect os arch when RPM is not installed (boo#1114197) - Fix LDAP authentication issue when a valid token is generated by the salt-api even when invalid user credentials are passed. (U#48901) - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations. (boo#1113784) - Fix remote command execution and incorrect access control when using salt-api. (boo#1113699) (CVE-2018-15751) - Fix Directory traversal vulnerability when using salt-api. Allows an attacker to determine what files exist on a server when querying /run or /events. (boo#1113698) (CVE-2018-15750) - Add multi-file support and globbing to the filetree (U#50018) - Bugfix: supportconfig non-root permission issues (U#50095) - Open profiles permissions to everyone for read-only - Preserving signature in "module.run" state (U#50049) - Install default salt-support profiles - Remove unit test, came from a wrong branch. Fix merging failure. - Add CPE_NAME for osversion* grain parsing - Get os_family for RPM distros from the RPM macros - Install support profiles - Fix async call to process manager (boo#1110938) - Salt-based supportconfig implementation (technology preview) - Bugfix: any unicode string of length 16 will raise TypeError - Fix IPv6 scope (boo#1108557) - Handle zypper ZYPPER_EXIT_NO_REPOS exit code (boo#1108834, boo#1109893) - Bugfix for pkg_resources crash (boo#1104491) - Fix loosen azure sdk dependencies in azurearm cloud driver (boo#1107333) - Fix broken "resolve_capabilities" on Python 3 (boo#1108995) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1574=1 Package List: - openSUSE Leap 42.3 (noarch): salt-bash-completion-2018.3.0-23.1 salt-fish-completion-2018.3.0-23.1 salt-zsh-completion-2018.3.0-23.1 - openSUSE Leap 42.3 (x86_64): python2-salt-2018.3.0-23.1 python3-salt-2018.3.0-23.1 salt-2018.3.0-23.1 salt-api-2018.3.0-23.1 salt-cloud-2018.3.0-23.1 salt-doc-2018.3.0-23.1 salt-master-2018.3.0-23.1 salt-minion-2018.3.0-23.1 salt-proxy-2018.3.0-23.1 salt-ssh-2018.3.0-23.1 salt-syndic-2018.3.0-23.1 References: https://www.suse.com/security/cve/CVE-2018-15750.html https://www.suse.com/security/cve/CVE-2018-15751.html https://bugzilla.suse.com/1104491 https://bugzilla.suse.com/1107333 https://bugzilla.suse.com/1108557 https://bugzilla.suse.com/1108834 https://bugzilla.suse.com/1108995 https://bugzilla.suse.com/1109893 https://bugzilla.suse.com/1110938 https://bugzilla.suse.com/1112874 https://bugzilla.suse.com/1113698 https://bugzilla.suse.com/1113699 https://bugzilla.suse.com/1113784 https://bugzilla.suse.com/1114197 https://bugzilla.suse.com/1114824 [View Less]

1 0

openSUSE-RU-2018:4192-1: moderate: Recommended update for trustedgrub2
by maintenance＠opensuse.org 19 Dec '18

19 Dec '18

openSUSE Recommended Update: Recommended update for trustedgrub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4192-1 Rating: moderate References: #1052420 #1084632 #1100984 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has three recommended fixes can … [View More]

1 0

openSUSE-SU-2018:4181-1: important: Security update for go1.11
by opensuse-security＠opensuse.org 19 Dec '18

19 Dec '18

openSUSE Security Update: Security update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4181-1 Rating: important References: #1098017 #1113978 #1118897 #1118898 #1118899 #1119634 #1119706 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 … [View More]______________________________________________________________________________ An update that solves three vulnerabilities and has four fixes is now available. Description: This new package for go1.11 fixes the following issues: Security issues fixed: - CVE-2018-16873: Fixed a remote code execution in go get, when executed with the -u flag (bsc#1118897) - CVE-2018-16874: Fixed an arbitrary filesystem write in go get, which could lead to code execution (bsc#1118898) - CVE-2018-16875: Fixed a Denial of Service in the crypto/x509 package during certificate chain validation(bsc#1118899) Non-security issues fixed: - Fixed build error with PIE linker flags on ppc64le (bsc#1113978 bsc#1098017) - Make profile.d/go.sh no longer set GOROOT=, in order to make switching between versions no longer break. This ends up removing the need for go.sh entirely (because GOPATH is also set automatically) (bsc#1119634) The following tracked regression fix is included: - Fix a regression that broke go get for import path patterns containing "..." (bsc#1119706) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1572=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1572=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): go1.11-1.11.4-2.1 go1.11-doc-1.11.4-2.1 - openSUSE Leap 42.3 (x86_64): go1.11-race-1.11.4-2.1 - openSUSE Leap 15.0 (x86_64): go1.11-1.11.4-lp150.2.1 go1.11-doc-1.11.4-lp150.2.1 go1.11-race-1.11.4-lp150.2.1 References: https://www.suse.com/security/cve/CVE-2018-16873.html https://www.suse.com/security/cve/CVE-2018-16874.html https://www.suse.com/security/cve/CVE-2018-16875.html https://bugzilla.suse.com/1098017 https://bugzilla.suse.com/1113978 https://bugzilla.suse.com/1118897 https://bugzilla.suse.com/1118898 https://bugzilla.suse.com/1118899 https://bugzilla.suse.com/1119634 https://bugzilla.suse.com/1119706 [View Less]

1 0

openSUSE-SU-2018:4177-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 18 Dec '18

18 Dec '18

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4177-1 Rating: moderate References: #1114157 #1114169 #1114170 #1116592 Cross-References: CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 CVE-2018-16855 Affected Products: openSUSE Backports SLE-15 … [View More]

1 0

openSUSE-SU-2018:4175-1: moderate: Security update for pdns
by opensuse-security＠opensuse.org 18 Dec '18

18 Dec '18

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4175-1 Rating: moderate References: #1114157 #1114169 Cross-References: CVE-2018-10851 CVE-2018-14626 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. … [View More]

1 0

openSUSE-SU-2018:4174-1: important: Security update for salt
by opensuse-security＠opensuse.org 18 Dec '18

18 Dec '18

openSUSE Security Update: Security update for salt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4174-1 Rating: important References: #1110938 #1112874 #1113698 #1113699 #1113784 #1114197 #1114824 Cross-References: CVE-2018-15750 CVE-2018-15751 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ … [View More] An update that solves two vulnerabilities and has 5 fixes is now available. Description: This update for salt fixes the following issues: Security issues fixed: - CVE-2018-15750: Fixed directory traversal vulnerability in salt-api (bsc#1113698). - CVE-2018-15751: Fixed remote authentication bypass in salt-api(netapi) that allows to execute arbitrary commands (bsc#1113699). Non-security issues fixed: - Improved handling of LDAP group id. gid is no longer treated as a string, which could have lead to faulty group creations (bsc#1113784). - Fixed async call to process manager (bsc#1110938) - Fixed OS arch detection when RPM is not installed (bsc#1114197) - Crontab module fix: file attributes option missing (bsc#1114824) - Fix git_pillar merging across multiple __env__ repositories (bsc#1112874) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1569=1 Package List: - openSUSE Leap 15.0 (x86_64): python2-salt-2018.3.0-lp150.3.17.1 python3-salt-2018.3.0-lp150.3.17.1 salt-2018.3.0-lp150.3.17.1 salt-api-2018.3.0-lp150.3.17.1 salt-cloud-2018.3.0-lp150.3.17.1 salt-doc-2018.3.0-lp150.3.17.1 salt-master-2018.3.0-lp150.3.17.1 salt-minion-2018.3.0-lp150.3.17.1 salt-proxy-2018.3.0-lp150.3.17.1 salt-ssh-2018.3.0-lp150.3.17.1 salt-syndic-2018.3.0-lp150.3.17.1 - openSUSE Leap 15.0 (noarch): salt-bash-completion-2018.3.0-lp150.3.17.1 salt-fish-completion-2018.3.0-lp150.3.17.1 salt-zsh-completion-2018.3.0-lp150.3.17.1 References: https://www.suse.com/security/cve/CVE-2018-15750.html https://www.suse.com/security/cve/CVE-2018-15751.html https://bugzilla.suse.com/1110938 https://bugzilla.suse.com/1112874 https://bugzilla.suse.com/1113698 https://bugzilla.suse.com/1113699 https://bugzilla.suse.com/1113784 https://bugzilla.suse.com/1114197 https://bugzilla.suse.com/1114824 [View Less]

1 0

openSUSE-RU-2018:4173-1: moderate: Recommended update for zynaddsubfx
by maintenance＠opensuse.org 18 Dec '18

18 Dec '18

openSUSE Recommended Update: Recommended update for zynaddsubfx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4173-1 Rating: moderate References: #1116460 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one … [View More]recommended fix can now be installed. Description: This update for zynaddsubfx fixes the following issues: - Require zynaddsubfx-common subpackage which is needed to run and fixes boo#1116460. - README.adoc states license is GPL 2+, updated %License field. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1567=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1567=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2018-1567=1 Package List: - openSUSE Leap 42.3 (x86_64): zynaddsubfx-3.0.1-2.3.1 zynaddsubfx-debuginfo-3.0.1-2.3.1 zynaddsubfx-debugsource-3.0.1-2.3.1 zynaddsubfx-dssi-3.0.1-2.3.1 zynaddsubfx-dssi-debuginfo-3.0.1-2.3.1 zynaddsubfx-lv2-3.0.1-2.3.1 zynaddsubfx-lv2-debuginfo-3.0.1-2.3.1 zynaddsubfx-vst-3.0.1-2.3.1 zynaddsubfx-vst-debuginfo-3.0.1-2.3.1 - openSUSE Leap 42.3 (noarch): zynaddsubfx-common-3.0.1-2.3.1 - openSUSE Leap 15.0 (noarch): zynaddsubfx-common-3.0.3-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): zynaddsubfx-3.0.3-lp150.2.3.1 zynaddsubfx-debuginfo-3.0.3-lp150.2.3.1 zynaddsubfx-debugsource-3.0.3-lp150.2.3.1 zynaddsubfx-dssi-3.0.3-lp150.2.3.1 zynaddsubfx-dssi-debuginfo-3.0.3-lp150.2.3.1 zynaddsubfx-lv2-3.0.3-lp150.2.3.1 zynaddsubfx-lv2-debuginfo-3.0.3-lp150.2.3.1 zynaddsubfx-vst-3.0.3-lp150.2.3.1 zynaddsubfx-vst-debuginfo-3.0.3-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): zynaddsubfx-3.0.3-bp150.3.3.1 zynaddsubfx-dssi-3.0.3-bp150.3.3.1 zynaddsubfx-lv2-3.0.3-bp150.3.3.1 zynaddsubfx-vst-3.0.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): zynaddsubfx-common-3.0.3-bp150.3.3.1 References: https://bugzilla.suse.com/1116460 [View Less]

1 0

openSUSE-RU-2018:4172-1: Optional update for gcc8
by maintenance＠opensuse.org 18 Dec '18

18 Dec '18

openSUSE Recommended Update: Optional update for gcc8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4172-1 Rating: low References: #1084812 #1084842 #1087550 #1094222 #1102564 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. … [View More]Description: This update adds the GNU Compiler GCC 8 to the distribution. The update also supplies gcc8 compatible libstdc++, libgcc_s1 and other gcc derived libraries to openSUSE Leap 15.0. Various optimizers have been improved in GCC 8, several of bugs fixed, quite some new warnings added and the error pin-pointing and fix-suggestions have been greatly improved. The GNU Compiler page for GCC 8 contains a summary of all the changes that have happened: https://gcc.gnu.org/gcc-8/changes.html Also changes needed or common pitfalls when porting software are described on: https://gcc.gnu.org/gcc-8/porting_to.html To use gcc8: - Install the "gcc8" (and likely also gcc8-c++) packages. - Use "gcc-8" or "g++-8" instead of the regular gcc / g++. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1568=1 Package List: - openSUSE Leap 15.0 (noarch): gcc8-info-8.2.1+r264010-lp150.2.3 - openSUSE Leap 15.0 (x86_64): cpp8-8.2.1+r264010-lp150.2.3 cpp8-debuginfo-8.2.1+r264010-lp150.2.3 cross-nvptx-gcc8-8.2.1+r264010-lp150.2.1 cross-nvptx-newlib8-devel-8.2.1+r264010-lp150.2.1 gcc8-32bit-8.2.1+r264010-lp150.2.3 gcc8-8.2.1+r264010-lp150.2.3 gcc8-ada-32bit-8.2.1+r264010-lp150.2.3 gcc8-ada-8.2.1+r264010-lp150.2.3 gcc8-ada-debuginfo-8.2.1+r264010-lp150.2.3 gcc8-c++-32bit-8.2.1+r264010-lp150.2.3 gcc8-c++-8.2.1+r264010-lp150.2.3 gcc8-c++-debuginfo-8.2.1+r264010-lp150.2.3 gcc8-debuginfo-8.2.1+r264010-lp150.2.3 gcc8-debugsource-8.2.1+r264010-lp150.2.3 gcc8-fortran-32bit-8.2.1+r264010-lp150.2.3 gcc8-fortran-8.2.1+r264010-lp150.2.3 gcc8-fortran-debuginfo-8.2.1+r264010-lp150.2.3 gcc8-go-32bit-8.2.1+r264010-lp150.2.3 gcc8-go-8.2.1+r264010-lp150.2.3 gcc8-go-debuginfo-8.2.1+r264010-lp150.2.3 gcc8-locale-8.2.1+r264010-lp150.2.3 libada8-32bit-8.2.1+r264010-lp150.2.3 libada8-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libada8-8.2.1+r264010-lp150.2.3 libada8-debuginfo-8.2.1+r264010-lp150.2.3 libasan5-32bit-8.2.1+r264010-lp150.2.3 libasan5-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libasan5-8.2.1+r264010-lp150.2.3 libasan5-debuginfo-8.2.1+r264010-lp150.2.3 libatomic1-32bit-8.2.1+r264010-lp150.2.3 libatomic1-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libatomic1-8.2.1+r264010-lp150.2.3 libatomic1-debuginfo-8.2.1+r264010-lp150.2.3 libgcc_s1-32bit-8.2.1+r264010-lp150.2.3 libgcc_s1-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libgcc_s1-8.2.1+r264010-lp150.2.3 libgcc_s1-debuginfo-8.2.1+r264010-lp150.2.3 libgfortran5-32bit-8.2.1+r264010-lp150.2.3 libgfortran5-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libgfortran5-8.2.1+r264010-lp150.2.3 libgfortran5-debuginfo-8.2.1+r264010-lp150.2.3 libgo13-32bit-8.2.1+r264010-lp150.2.3 libgo13-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libgo13-8.2.1+r264010-lp150.2.3 libgo13-debuginfo-8.2.1+r264010-lp150.2.3 libgomp1-32bit-8.2.1+r264010-lp150.2.3 libgomp1-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libgomp1-8.2.1+r264010-lp150.2.3 libgomp1-debuginfo-8.2.1+r264010-lp150.2.3 libitm1-32bit-8.2.1+r264010-lp150.2.3 libitm1-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libitm1-8.2.1+r264010-lp150.2.3 libitm1-debuginfo-8.2.1+r264010-lp150.2.3 liblsan0-8.2.1+r264010-lp150.2.3 liblsan0-debuginfo-8.2.1+r264010-lp150.2.3 libmpx2-32bit-8.2.1+r264010-lp150.2.3 libmpx2-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libmpx2-8.2.1+r264010-lp150.2.3 libmpx2-debuginfo-8.2.1+r264010-lp150.2.3 libmpxwrappers2-32bit-8.2.1+r264010-lp150.2.3 libmpxwrappers2-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libmpxwrappers2-8.2.1+r264010-lp150.2.3 libmpxwrappers2-debuginfo-8.2.1+r264010-lp150.2.3 libquadmath0-32bit-8.2.1+r264010-lp150.2.3 libquadmath0-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libquadmath0-8.2.1+r264010-lp150.2.3 libquadmath0-debuginfo-8.2.1+r264010-lp150.2.3 libstdc++6-32bit-8.2.1+r264010-lp150.2.3 libstdc++6-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libstdc++6-8.2.1+r264010-lp150.2.3 libstdc++6-debuginfo-8.2.1+r264010-lp150.2.3 libstdc++6-devel-gcc8-32bit-8.2.1+r264010-lp150.2.3 libstdc++6-devel-gcc8-8.2.1+r264010-lp150.2.3 libstdc++6-locale-8.2.1+r264010-lp150.2.3 libtsan0-8.2.1+r264010-lp150.2.3 libtsan0-debuginfo-8.2.1+r264010-lp150.2.3 libubsan1-32bit-8.2.1+r264010-lp150.2.3 libubsan1-32bit-debuginfo-8.2.1+r264010-lp150.2.3 libubsan1-8.2.1+r264010-lp150.2.3 libubsan1-debuginfo-8.2.1+r264010-lp150.2.3 References: https://bugzilla.suse.com/1084812 https://bugzilla.suse.com/1084842 https://bugzilla.suse.com/1087550 https://bugzilla.suse.com/1094222 https://bugzilla.suse.com/1102564 [View Less]

1 0

openSUSE-SU-2018:4156-1: moderate: Security update for pdns
by opensuse-security＠opensuse.org 17 Dec '18

17 Dec '18

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4156-1 Rating: moderate References: #1114157 #1114169 Cross-References: CVE-2018-10851 CVE-2018-14626 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. … [View More]

1 0

openSUSE-SU-2018:4152-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 17 Dec '18

17 Dec '18

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4152-1 Rating: moderate References: #1114157 #1114169 #1114170 #1116592 Cross-References: CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 CVE-2018-16855 Affected Products: openSUSE Leap 15.0 … [View More]

1 0

openSUSE-SU-2018:4151-1: moderate: Security update for pdns-recursor
by opensuse-security＠opensuse.org 17 Dec '18

17 Dec '18

openSUSE Security Update: Security update for pdns-recursor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4151-1 Rating: moderate References: #1114157 #1114169 #1114170 Cross-References: CVE-2018-10851 CVE-2018-14626 CVE-2018-14644 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update … [View More]

1 0

openSUSE-SU-2018:4148-1: moderate: Security update for openvswitch
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4148-1 Rating: moderate References: #1104467 Cross-References: CVE-2018-17204 CVE-2018-17205 CVE-2018-17206 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three … [View More]vulnerabilities is now available. Description: This update for openvswitch to version 2.7.6 fixes the following issues: These security issues were fixed: - CVE-2018-17205: Prevent OVS crash when reverting old flows in bundle commit (bsc#1104467). - CVE-2018-17206: Avoid buffer overread in BUNDLE action decoding (bsc#1104467). - CVE-2018-17204:When decoding a group mod, it validated the group type and command after the whole group mod has been decoded. The OF1.5 decoder, however, tried to use the type and command earlier, when it might still be invalid. This caused an assertion failure (via OVS_NOT_REACHED) (bsc#1104467). These non-security issues were fixed: - ofproto/bond: Fix bond reconfiguration race condition. - ofproto/bond: Fix bond post recirc rule leak. - ofproto/bond: fix interal flow leak of tcp-balance bond - systemd: Restart openvswitch service if a daemon crashes - conntrack: Fix checks for TCP, UDP, and IPv6 header sizes. - ofp-actions: Fix translation of set_field for nw_ecn - netdev-dpdk: Fix mempool segfault. - ofproto-dpif-upcall: Fix flow setup/delete race. - learn: Fix memory leak in learn_parse_sepc() - netdev-dpdk: fix mempool_configure error state - vswitchd: Add --cleanup option to the 'appctl exit' command - ofp-parse: Fix memory leak on error path in parse_ofp_group_mod_file(). - actions: Fix memory leak on error path in parse_ct_lb_action(). - dpif-netdev: Fix use-after-free error in reconfigure_datapath(). - bridge: Fix memory leak in bridge_aa_update_trunks(). - dpif-netlink: Fix multiple-free and fd leak on error path. - ofp-print: Avoid array overread in print_table_instruction_features(). - flow: Fix buffer overread in flow_hash_symmetric_l3l4(). - systemd: start vswitchd after udev - ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod(). - ovsdb-types: Fix memory leak on error path. - tnl-ports: Fix loss of tunneling upon removal of a single tunnel port. - netdev: check for NULL fields in netdev_get_addrs - netdev-dpdk: vhost get stats fix. - netdev-dpdk: use 64-bit arithmetic when converting rates. - ofp-util: Fix buffer overread in ofputil_decode_bundle_add(). - ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod(). - ofp-util: Fix memory leaks when parsing OF1.5 group properties. - ofp-actions: Fix buffer overread in decode_LEARN_specs(). - flow: Fix buffer overread for crafted IPv6 packets. - ofp-actions: Properly interpret "output:in_port". - ovs-ofctl: Avoid read overrun in ofperr_decode_msg(). - odp-util: Avoid misaligned references to ip6_hdr. - ofproto-dpif-upcall: Fix action attr iteration. - ofproto-dpif-upcall: Fix key attr iteration. - netdev-dpdk: vhost get stats fix. - netdev-dpdk: use 64-bit arithmetic when converting rates. - ofp-util: Fix buffer overread in ofputil_decode_bundle_add(). - ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod(). - ofp-util: Fix memory leaks when parsing OF1.5 group properties. - odp-util: Fix buffer overread in parsing string form of ODP flows. - ovs-vsctl: Fix segfault when attempting to del-port from parent bridge. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1562=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openvswitch-2.7.6-19.1 openvswitch-debuginfo-2.7.6-19.1 openvswitch-debugsource-2.7.6-19.1 openvswitch-devel-2.7.6-19.1 openvswitch-ovn-central-2.7.6-19.1 openvswitch-ovn-central-debuginfo-2.7.6-19.1 openvswitch-ovn-common-2.7.6-19.1 openvswitch-ovn-common-debuginfo-2.7.6-19.1 openvswitch-ovn-docker-2.7.6-19.1 openvswitch-ovn-host-2.7.6-19.1 openvswitch-ovn-host-debuginfo-2.7.6-19.1 openvswitch-ovn-vtep-2.7.6-19.1 openvswitch-ovn-vtep-debuginfo-2.7.6-19.1 openvswitch-pki-2.7.6-19.1 openvswitch-test-2.7.6-19.1 openvswitch-test-debuginfo-2.7.6-19.1 openvswitch-vtep-2.7.6-19.1 openvswitch-vtep-debuginfo-2.7.6-19.1 python-openvswitch-2.7.6-19.1 python-openvswitch-test-2.7.6-19.1 References: https://www.suse.com/security/cve/CVE-2018-17204.html https://www.suse.com/security/cve/CVE-2018-17205.html https://www.suse.com/security/cve/CVE-2018-17206.html https://bugzilla.suse.com/1104467 [View Less]

1 0

openSUSE-SU-2018:4147-1: moderate: Security update for qemu
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4147-1 Rating: moderate References: #1100408 #1106222 #1110910 #1111006 #1111010 #1111013 #1114422 Cross-References: CVE-2018-10839 CVE-2018-15746 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 Affected Products: … [View More]openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS (bsc#1110910). - CVE-2018-15746: Fixed qemu-seccomp.c that might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread (bsc#1106222). - CVE-2018-17958: Fixed a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used (bsc#1111006). - CVE-2018-17962: Fixed a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used (bsc#1111010). - CVE-2018-17963: Fixed qemu_deliver_packet_iov in net/net.c that accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. (bsc#1111013) - CVE-2018-18849: Fixed an out of bounds memory access issue that was found in the LSI53C895A SCSI Host Bus Adapter emulation while writing a message in lsi_do_msgin. It could occur during migration if the 'msg_len' field has an invalid value. A user/process could use this flaw to crash the Qemu process resulting in DoS (bsc#1114422). Non-security issues fixed: - Improving disk performance for qemu on xen (bsc#1100408) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1563=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.1-50.1 qemu-linux-user-debuginfo-2.9.1-50.1 qemu-linux-user-debugsource-2.9.1-50.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.1-50.1 qemu-arm-2.9.1-50.1 qemu-arm-debuginfo-2.9.1-50.1 qemu-block-curl-2.9.1-50.1 qemu-block-curl-debuginfo-2.9.1-50.1 qemu-block-dmg-2.9.1-50.1 qemu-block-dmg-debuginfo-2.9.1-50.1 qemu-block-iscsi-2.9.1-50.1 qemu-block-iscsi-debuginfo-2.9.1-50.1 qemu-block-rbd-2.9.1-50.1 qemu-block-rbd-debuginfo-2.9.1-50.1 qemu-block-ssh-2.9.1-50.1 qemu-block-ssh-debuginfo-2.9.1-50.1 qemu-debugsource-2.9.1-50.1 qemu-extra-2.9.1-50.1 qemu-extra-debuginfo-2.9.1-50.1 qemu-guest-agent-2.9.1-50.1 qemu-guest-agent-debuginfo-2.9.1-50.1 qemu-ksm-2.9.1-50.1 qemu-kvm-2.9.1-50.1 qemu-lang-2.9.1-50.1 qemu-ppc-2.9.1-50.1 qemu-ppc-debuginfo-2.9.1-50.1 qemu-s390-2.9.1-50.1 qemu-s390-debuginfo-2.9.1-50.1 qemu-testsuite-2.9.1-50.1 qemu-tools-2.9.1-50.1 qemu-tools-debuginfo-2.9.1-50.1 qemu-x86-2.9.1-50.1 qemu-x86-debuginfo-2.9.1-50.1 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0+-50.1 qemu-seabios-1.10.2-50.1 qemu-sgabios-8-50.1 qemu-vgabios-1.10.2-50.1 References: https://www.suse.com/security/cve/CVE-2018-10839.html https://www.suse.com/security/cve/CVE-2018-15746.html https://www.suse.com/security/cve/CVE-2018-17958.html https://www.suse.com/security/cve/CVE-2018-17962.html https://www.suse.com/security/cve/CVE-2018-17963.html https://www.suse.com/security/cve/CVE-2018-18849.html https://bugzilla.suse.com/1100408 https://bugzilla.suse.com/1106222 https://bugzilla.suse.com/1110910 https://bugzilla.suse.com/1111006 https://bugzilla.suse.com/1111010 https://bugzilla.suse.com/1111013 https://bugzilla.suse.com/1114422 [View Less]

1 0

openSUSE-RU-2018:4146-1: moderate: Recommended update for libcdio
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for libcdio ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4146-1 Rating: moderate References: #1108134 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libcdio fixes the … [View More]

1 0

openSUSE-RU-2018:4145-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4145-1 Rating: moderate References: #1115508 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-… [View More]

1 0

openSUSE-SU-2018:4144-1: moderate: Security update for tcpdump
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4144-1 Rating: moderate References: #1117267 Cross-References: CVE-2018-19519 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-SU-2018:4143-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4143-1 Rating: important References: #1118529 #1119364 Cross-References: CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-… [View More]

1 0

openSUSE-SU-2018:4142-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4142-1 Rating: important References: #1118529 #1119364 Cross-References: CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-… [View More]

1 0

openSUSE-SU-2018:4141-1: important: Security update for cups
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for cups ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4141-1 Rating: important References: #1115750 Cross-References: CVE-2018-4700 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update … [View More]

1 0

openSUSE-SU-2018:4140-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4140-1 Rating: important References: #1109105 #1111479 #1111480 #1112229 #1117022 #1117274 #1117313 #1117327 #1117331 Cross-References: CVE-2018-17183 CVE-2018-17961 CVE-2018-18073 CVE-2018-18284 CVE-2018-19409 CVE-2018-19475 CVE-2018-19476 … [View More]

1 0

openSUSE-RU-2018:4139-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4139-1 Rating: moderate References: #1055834 #1089332 #1090884 #1094603 #1098448 #1104090 #1104178 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 7 recommended fixes … [View More]

1 0

openSUSE-SU-2018:4138-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4138-1 Rating: important References: #1109105 #1111479 #1111480 #1112229 #1117022 #1117274 #1117313 #1117327 #1117331 Cross-References: CVE-2018-17183 CVE-2018-17961 CVE-2018-18073 CVE-2018-18284 CVE-2018-19409 CVE-2018-19475 CVE-2018-19476 … [View More]

1 0

openSUSE-RU-2018:4137-1: moderate: Recommended update for enigmail
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4137-1 Rating: moderate References: #1118935 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: … [View More]

1 0

openSUSE-RU-2018:4136-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4136-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one … [View More]

1 0

openSUSE-SU-2018:4135-1: important: Security update for qemu
by opensuse-security＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4135-1 Rating: important References: #1108474 #1114529 Cross-References: CVE-2018-16847 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. … [View More] Description: This update for qemu fixes the following issues: Security issue fixed: - CVE-2018-16847: Fixed an out of bounds r/w buffer access in cmb operations (bsc#1114529). Non-security issue fixed: - Fixed serial console issue that triggered a qemu-kvm bug (bsc#1108474). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1551=1 Package List: - openSUSE Leap 15.0 (x86_64): qemu-2.11.2-lp150.7.15.1 qemu-arm-2.11.2-lp150.7.15.1 qemu-arm-debuginfo-2.11.2-lp150.7.15.1 qemu-block-curl-2.11.2-lp150.7.15.1 qemu-block-curl-debuginfo-2.11.2-lp150.7.15.1 qemu-block-dmg-2.11.2-lp150.7.15.1 qemu-block-dmg-debuginfo-2.11.2-lp150.7.15.1 qemu-block-gluster-2.11.2-lp150.7.15.1 qemu-block-gluster-debuginfo-2.11.2-lp150.7.15.1 qemu-block-iscsi-2.11.2-lp150.7.15.1 qemu-block-iscsi-debuginfo-2.11.2-lp150.7.15.1 qemu-block-rbd-2.11.2-lp150.7.15.1 qemu-block-rbd-debuginfo-2.11.2-lp150.7.15.1 qemu-block-ssh-2.11.2-lp150.7.15.1 qemu-block-ssh-debuginfo-2.11.2-lp150.7.15.1 qemu-debuginfo-2.11.2-lp150.7.15.1 qemu-debugsource-2.11.2-lp150.7.15.1 qemu-extra-2.11.2-lp150.7.15.1 qemu-extra-debuginfo-2.11.2-lp150.7.15.1 qemu-guest-agent-2.11.2-lp150.7.15.1 qemu-guest-agent-debuginfo-2.11.2-lp150.7.15.1 qemu-ksm-2.11.2-lp150.7.15.1 qemu-kvm-2.11.2-lp150.7.15.1 qemu-lang-2.11.2-lp150.7.15.1 qemu-linux-user-2.11.2-lp150.7.15.1 qemu-linux-user-debuginfo-2.11.2-lp150.7.15.1 qemu-linux-user-debugsource-2.11.2-lp150.7.15.1 qemu-ppc-2.11.2-lp150.7.15.1 qemu-ppc-debuginfo-2.11.2-lp150.7.15.1 qemu-s390-2.11.2-lp150.7.15.1 qemu-s390-debuginfo-2.11.2-lp150.7.15.1 qemu-testsuite-2.11.2-lp150.7.15.1 qemu-tools-2.11.2-lp150.7.15.1 qemu-tools-debuginfo-2.11.2-lp150.7.15.1 qemu-x86-2.11.2-lp150.7.15.1 qemu-x86-debuginfo-2.11.2-lp150.7.15.1 - openSUSE Leap 15.0 (noarch): qemu-ipxe-1.0.0+-lp150.7.15.1 qemu-seabios-1.11.0-lp150.7.15.1 qemu-sgabios-8-lp150.7.15.1 qemu-vgabios-1.11.0-lp150.7.15.1 References: https://www.suse.com/security/cve/CVE-2018-16847.html https://bugzilla.suse.com/1108474 https://bugzilla.suse.com/1114529 [View Less]

1 0

openSUSE-RU-2018:4134-1: moderate: Recommended update for enigmail
by maintenance＠opensuse.org 15 Dec '18

15 Dec '18

openSUSE Recommended Update: Recommended update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4134-1 Rating: moderate References: #1118935 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This … [View More]

1 0

openSUSE-SU-2018:4133-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Dec '18

14 Dec '18

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4133-1 Rating: important References: #1051510 #1055120 #1061840 #1065600 #1065729 #1068273 #1078248 #1082555 #1082653 #1083647 #1085535 #1089350 #1097755 #1104824 #1105428 #1106105 #1106237 #1106240 #1107256 #1107385 … [View More]

1 0

openSUSE-SU-2018:4132-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 14 Dec '18

14 Dec '18

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4132-1 Rating: important References: #1012382 #1027457 #1042286 #1046264 #1066223 #1094973 #1102439 #1103624 #1104731 #1106105 #1106237 #1106240 #1107385 #1108145 #1109330 #1109806 #1111062 #1111809 #1112246 #1112963 … [View More]

1 0

openSUSE-SU-2018:4125-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 14 Dec '18

14 Dec '18

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4125-1 Rating: moderate References: #1119245 Cross-References: CVE-2018-19968 CVE-2018-19969 CVE-2018-19970 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An … [View More]

1 0

openSUSE-SU-2018:4124-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 14 Dec '18

14 Dec '18

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4124-1 Rating: moderate References: #1119245 Cross-References: CVE-2018-19968 CVE-2018-19969 CVE-2018-19970 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 … [View More]

1 0

openSUSE-SU-2018:4122-1: important: Security update for Chromium
by opensuse-security＠opensuse.org 14 Dec '18

14 Dec '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4122-1 Rating: important References: #1119364 Cross-References: CVE-2018-17481 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability … [View More]

1 0

openSUSE-SU-2018:4117-1: moderate: Security update for mozilla-nss
by opensuse-security＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Security Update: Security update for mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4117-1 Rating: moderate References: #1106873 #1119069 Cross-References: CVE-2018-12384 CVE-2018-12404 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that … [View More]fixes two vulnerabilities is now available. Description: This update for mozilla-nss to version 3.36.6 fixes the following issues: Security issues fixed: - CVE-2018-12384: NSS responded to an SSLv2-compatible ClientHello with a ServerHello that had an all-zero random (bmo#1483128, boo#1106873) - CVE-2018-12404: Cache side-channel variant of the Bleichenbacher attack (bmo#1485864, boo#1119069) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1540=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1540=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libfreebl3-3.36.6-54.1 libfreebl3-debuginfo-3.36.6-54.1 libsoftokn3-3.36.6-54.1 libsoftokn3-debuginfo-3.36.6-54.1 mozilla-nss-3.36.6-54.1 mozilla-nss-certs-3.36.6-54.1 mozilla-nss-certs-debuginfo-3.36.6-54.1 mozilla-nss-debuginfo-3.36.6-54.1 mozilla-nss-debugsource-3.36.6-54.1 mozilla-nss-devel-3.36.6-54.1 mozilla-nss-sysinit-3.36.6-54.1 mozilla-nss-sysinit-debuginfo-3.36.6-54.1 mozilla-nss-tools-3.36.6-54.1 mozilla-nss-tools-debuginfo-3.36.6-54.1 - openSUSE Leap 42.3 (x86_64): libfreebl3-32bit-3.36.6-54.1 libfreebl3-debuginfo-32bit-3.36.6-54.1 libsoftokn3-32bit-3.36.6-54.1 libsoftokn3-debuginfo-32bit-3.36.6-54.1 mozilla-nss-32bit-3.36.6-54.1 mozilla-nss-certs-32bit-3.36.6-54.1 mozilla-nss-certs-debuginfo-32bit-3.36.6-54.1 mozilla-nss-debuginfo-32bit-3.36.6-54.1 mozilla-nss-sysinit-32bit-3.36.6-54.1 mozilla-nss-sysinit-debuginfo-32bit-3.36.6-54.1 - openSUSE Leap 15.0 (i586 x86_64): libfreebl3-3.36.6-lp150.2.6.1 libfreebl3-debuginfo-3.36.6-lp150.2.6.1 libsoftokn3-3.36.6-lp150.2.6.1 libsoftokn3-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-3.36.6-lp150.2.6.1 mozilla-nss-certs-3.36.6-lp150.2.6.1 mozilla-nss-certs-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-debugsource-3.36.6-lp150.2.6.1 mozilla-nss-devel-3.36.6-lp150.2.6.1 mozilla-nss-sysinit-3.36.6-lp150.2.6.1 mozilla-nss-sysinit-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-tools-3.36.6-lp150.2.6.1 mozilla-nss-tools-debuginfo-3.36.6-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): libfreebl3-32bit-3.36.6-lp150.2.6.1 libfreebl3-32bit-debuginfo-3.36.6-lp150.2.6.1 libsoftokn3-32bit-3.36.6-lp150.2.6.1 libsoftokn3-32bit-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-32bit-3.36.6-lp150.2.6.1 mozilla-nss-32bit-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-certs-32bit-3.36.6-lp150.2.6.1 mozilla-nss-certs-32bit-debuginfo-3.36.6-lp150.2.6.1 mozilla-nss-sysinit-32bit-3.36.6-lp150.2.6.1 mozilla-nss-sysinit-32bit-debuginfo-3.36.6-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-12384.html https://www.suse.com/security/cve/CVE-2018-12404.html https://bugzilla.suse.com/1106873 https://bugzilla.suse.com/1119069 [View Less]

1 0

openSUSE-RU-2018:4116-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4116-1 Rating: moderate References: #1026807 #1084527 #1085786 #1095818 #1102871 #1107579 #1109147 #972463 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 8 recommended … [View More]

1 0

openSUSE-RU-2018:4115-1: moderate: Recommended update for plymouth
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for plymouth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4115-1 Rating: moderate References: #1110199 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plymouth provides … [View More]the following fixes: - Make sure plymouthd stops throbber animation at the first opportunity after receiving quit command, instead of looping multiple times. (bsc#1110199) - drm: Use preferred mode for outputs. - drm: Refactor ply_renderer_connector_get_rotation. - drm: Reset LUT/gamma table before the first drmModeSetCrtc call. - libply: Move kernel command line parsing functions to libply/ply-utils. - throbber: Don't skip last frame when waiting for end. - systemd-units: Add "ConditionVirtualization=!container" in systemd-ask-password-plymouth.path. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1543=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libply-boot-client4-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply-boot-client4-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply-splash-core4-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply-splash-core4-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply-splash-graphics4-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply-splash-graphics4-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply4-0.9.4+git20181111.118c5ca-lp150.3.6.1 libply4-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-debugsource-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-devel-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-dracut-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-fade-throbber-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-fade-throbber-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-label-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-label-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-label-ft-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-label-ft-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-script-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-script-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-space-flares-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-space-flares-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-throbgress-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-throbgress-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-tribar-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-tribar-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-two-step-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-plugin-two-step-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-scripts-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-x11-renderer-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-x11-renderer-debuginfo-0.9.4+git20181111.118c5ca-lp150.3.6.1 - openSUSE Leap 15.0 (noarch): plymouth-theme-fade-in-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-theme-script-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-theme-solar-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-theme-spinfinity-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-theme-spinner-0.9.4+git20181111.118c5ca-lp150.3.6.1 plymouth-theme-tribar-0.9.4+git20181111.118c5ca-lp150.3.6.1 References: https://bugzilla.suse.com/1110199 [View Less]

1 0

openSUSE-RU-2018:4114-1: moderate: Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4114-1 Rating: moderate References: #1088310 #1092493 #1098125 #1105988 #1118021 #1118027 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ … [View More]An update that solves one vulnerability and has 5 fixes is now available. Description: This update for aws-cli, python-boto3, python-botocore, python-s3transfer fixes the following issues: aws-cli: - Update to version 1.16.61. (bsc#1088310) + For detailed changes see https://github.com/aws/aws-cli/blob/1.16.1/CHANGELOG.rst - Update to version 1.16.1 (bsc#1105988, bsc#1092493) + CVE-2018-15869: An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, might have unintentionally loaded an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog. - Disable vendored versions of requests and six from botocore and use requests and six from the RPM packages. python-botocore: - Update to version 1.10.40 + For detailed changes, please refer to the changelog. + Remove the broken attempt to avoid using the bundeled requests module provided by the source (bsc#1088310) python-boto3: - Version update to 1.9.57 (bsc#1118021, bsc#1118027) + For detailed changes, please refer to the changelog. python-s3transfer: - Update to version 0.1.13 - Make sure to really not use any bundles. - enhancement:max_bandwidth: Add ability to set maximum bandwidth consumption for streaming of S3 uploads and downloads. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1545=1 Package List: - openSUSE Leap 15.0 (noarch): aws-cli-1.16.61-lp150.3.3.1 python2-boto3-1.9.57-lp150.2.3.1 python2-botocore-1.12.57-lp150.2.3.1 python2-s3transfer-0.1.13-lp150.2.3.1 python3-boto3-1.9.57-lp150.2.3.1 python3-botocore-1.12.57-lp150.2.3.1 python3-s3transfer-0.1.13-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-15869.html https://bugzilla.suse.com/1088310 https://bugzilla.suse.com/1092493 https://bugzilla.suse.com/1098125 https://bugzilla.suse.com/1105988 https://bugzilla.suse.com/1118021 https://bugzilla.suse.com/1118027 [View Less]

1 0

openSUSE-RU-2018:4113-1: moderate: Recommended update for suse-module-tools
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for suse-module-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4113-1 Rating: moderate References: #1036463 #1105495 #1111183 #1111300 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. … [View More]

1 0

openSUSE-SU-2018:4112-1: important: Security update for Mozilla Firefox
by opensuse-security＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Security Update: Security update for Mozilla Firefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4112-1 Rating: important References: #1119105 Cross-References: CVE-2018-12405 CVE-2018-17466 CVE-2018-18492 CVE-2018-18493 CVE-2018-18494 CVE-2018-18498 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 … [View More]______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update to Mozilla Firefox 60.4.0 ESR fixes security issues and bugs. Security issues fixed as part of the MFSA 2018-30 advisory (boo#1119105): - CVE-2018-17466: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11 - CVE-2018-18492: Use-after-free with select element - CVE-2018-18493: Buffer overflow in accelerated 2D canvas with Skia - CVE-2018-18494: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs - CVE-2018-18498: Integer overflow when calculating buffer sizes for images - CVE-2018-12405: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 The following changes are included: - now requires NSS >= 3.36.6 - Updated list of currency codes to include Unidad Previsional (UYW) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1544=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2018-1544=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.4.0-125.1 MozillaFirefox-branding-upstream-60.4.0-125.1 MozillaFirefox-buildsymbols-60.4.0-125.1 MozillaFirefox-debuginfo-60.4.0-125.1 MozillaFirefox-debugsource-60.4.0-125.1 MozillaFirefox-devel-60.4.0-125.1 MozillaFirefox-translations-common-60.4.0-125.1 MozillaFirefox-translations-other-60.4.0-125.1 - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.4.0-lp150.3.30.1 MozillaFirefox-branding-upstream-60.4.0-lp150.3.30.1 MozillaFirefox-buildsymbols-60.4.0-lp150.3.30.1 MozillaFirefox-debuginfo-60.4.0-lp150.3.30.1 MozillaFirefox-debugsource-60.4.0-lp150.3.30.1 MozillaFirefox-devel-60.4.0-lp150.3.30.1 MozillaFirefox-translations-common-60.4.0-lp150.3.30.1 MozillaFirefox-translations-other-60.4.0-lp150.3.30.1 References: https://www.suse.com/security/cve/CVE-2018-12405.html https://www.suse.com/security/cve/CVE-2018-17466.html https://www.suse.com/security/cve/CVE-2018-18492.html https://www.suse.com/security/cve/CVE-2018-18493.html https://www.suse.com/security/cve/CVE-2018-18494.html https://www.suse.com/security/cve/CVE-2018-18498.html https://bugzilla.suse.com/1119105 [View Less]

1 0

openSUSE-SU-2018:4111-1: important: Security update for xen
by opensuse-security＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:4111-1 Rating: important References: #1027519 #1108940 #1114405 #1114423 #1115040 #1115045 #1115047 Cross-References: CVE-2018-18849 CVE-2018-18883 CVE-2018-19961 CVE-2018-19962 CVE-2018-19965 CVE-2018-19966 Affected Products: … [View More]openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has one errata is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2018-18849: Fixed an out of bounds memory access issue was found in the LSI53C895A SCSI Host Bus Adapter emulation while writing a message in lsi_do_msgin (bsc#1114423). - CVE-2018-18883: Fixed a NULL pointer dereference that could have been triggered by nested VT-x that where not properly restricted (XSA-278)(bsc#1114405). - CVE-2018-19965: Fixed denial of service issue from attempting to use INVPCID with a non-canonical addresses (XSA-279)(bsc#1115045). - CVE-2018-19966: Fixed issue introduced by XSA-240 that could have caused conflicts with shadow paging (XSA-280)(bsc#1115047). - CVE-2018-19961 CVE-2018-19962: Fixed insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275)(bsc#1115040). Non-security issues fixed: - Added upstream bug fixes (bsc#1027519). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-1530=1 Package List: - openSUSE Leap 42.3 (x86_64): xen-4.9.3_03-34.1 xen-debugsource-4.9.3_03-34.1 xen-devel-4.9.3_03-34.1 xen-doc-html-4.9.3_03-34.1 xen-libs-4.9.3_03-34.1 xen-libs-debuginfo-4.9.3_03-34.1 xen-tools-4.9.3_03-34.1 xen-tools-debuginfo-4.9.3_03-34.1 xen-tools-domU-4.9.3_03-34.1 xen-tools-domU-debuginfo-4.9.3_03-34.1 References: https://www.suse.com/security/cve/CVE-2018-18849.html https://www.suse.com/security/cve/CVE-2018-18883.html https://www.suse.com/security/cve/CVE-2018-19961.html https://www.suse.com/security/cve/CVE-2018-19962.html https://www.suse.com/security/cve/CVE-2018-19965.html https://www.suse.com/security/cve/CVE-2018-19966.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1108940 https://bugzilla.suse.com/1114405 https://bugzilla.suse.com/1114423 https://bugzilla.suse.com/1115040 https://bugzilla.suse.com/1115045 https://bugzilla.suse.com/1115047 [View Less]

1 0

openSUSE-RU-2018:4110-1: moderate: Recommended update for flatpak
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for flatpak ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4110-1 Rating: moderate References: #984817 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for flatpak fixes the … [View More]

1 0

openSUSE-RU-2018:4109-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 13 Dec '18

13 Dec '18

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:4109-1 Rating: moderate References: #1116226 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-… [View More]

1 0

Main

Development

Information

Community

Social Media

Other

openSUSE Updates